Which of the following is a fundamental principle of enterprise password vault policies as it applies to CyberArk Defender Certification?